Have you noticed that your Wi-Fi has slowed down, and unknown devices have appeared in the list of connected devices? Or perhaps you want to restrict internet access for certain family members at night? Removing a user from Wi-Fi networks — it's not just a security issue, but also a way to optimize internet speed for priority devices. In this article, we'll cover all possible methods: from basic blocking via the router's web interface to advanced settings using MAC filtering and changing the password.
It is important to understand that the process may differ depending on the router model and firmware. For example, on TP-Link Archer C6 the path to the security settings will be one, and on Keenetic Giga — completely different. We've compiled universal instructions that will work for 90% of modern routers, and also highlighted the specifics for popular brands. If you've never accessed your router's control panel before, don't worry: we'll explain every step in detail, including logging in using your IP address and resetting settings if errors occur.
Before you begin, check whether there are actually any unauthorized devices on your network. Sometimes slow Wi-Fi is due to channel congestion or issues with your ISP. To eliminate false alarms, use mobile apps like Fing or WiFi Analyzer - they will show all connected devices with their indication MAC addresses and manufacturers. If you find an unfamiliar device (for example, with the name Xiaomi_AB:CD:EF(if you don't have equipment of this brand), proceed to blocking.
1. Method 1: Blocking the device via the router's web interface
The most reliable and universal method is to use your router's control panel. This doesn't require any special software or technical knowledge. A computer or smartphone connected to the same network is sufficient.
Find first Your router's IP address. Usually it is 192.168.0.1 or 192.168.1.1, but it may differ. You can find it out:
- 🖥️ On Windows: Open Command Prompt (
Win + R→ entercmd→ipconfig) and find the line “Default gateway”. - 📱 On Android: Go to
Settings → Wi-Fi → [your network] → Advanced(or use the app WiFi Analyzer). - 🍎 On iPhone:
Settings → Wi-Fi → (i) next to your network → Router.
Next:
- Enter the IP address into the address bar of your browser (e.g.
192.168.0.1). - Enter your login and password (by default it is often
admin/adminor indicated on the router sticker). - Find the section with connected devices. It may be called:
DHCP → DHCP Clients(TP-Link, ASUS)Devices → Device List(Keenetic)Wireless → Wireless Statistics(D-Link)
Make sure your router is turned on and you are connected to its network.
Find your router's IP address (via command line or phone settings)
Prepare your login/password for entry (usually on the router sticker)
Open your browser in incognito mode to avoid caching old data-->
On some routers (for example, Zyxel Keenetic) The block is temporary—the device will be able to connect again after rebooting the router. To block access permanently, use MAC filtering (more on this in the next section).
2. Method 2: MAC filtering – reliable blocking by unique identifier
MAC address (Media Access Control) is a unique identifier for a network device assigned during manufacturing. Unlike IP, which can change, MAC remains constant (unless it is manually spoofed). MAC filtering allows completely block access to a specific device, even if it changes its IP or network name.
To configure MAC filtering:
- Find the MAC address of the target device. You can view it here:
- In the list of connected clients in the router panel (section
DHCPorDevices). - On the device itself:
- 🖥️ Windows:
ipconfig /all→ line "Physical address". - 📱 Android:
Settings → About phone → General information → Wi-Fi MAC address. - 🍎 iPhone:
Settings → General → About → Wi-Fi Address.
- 🖥️ Windows:
- In the list of connected clients in the router panel (section
Wireless → MAC Filtering (or similar).Deny" (to prohibit).| Router brand | The Path to MAC Filtering | Peculiarities |
|---|---|---|
| TP-Link | Advanced → MAC Filtering |
You can choose the days/time of blocking |
| ASUS | Wireless → MAC Filter |
Supports white/black lists |
| Keenetic | Home Network → Devices → [select device] → Block |
The blocking remains in effect until the router is rebooted. |
| D-Link | Advanced → MAC Filter |
Requires a reboot after application |
| MikroTik | IP → Firewall → Filter Rules |
Knowledge of firewall configuration is required. |
MAC filtering is one of the most reliable methods, but it has its drawbacks:
- ⚠️ Smart devices (eg. Xiaomi or Samsung SmartThings) may accidentally change the MAC address during updates.
- ⚠️ Advanced users can spoof a MAC address (although this requires technical knowledge).
- ⚠️ On some routers, filtering only works for Wi-Fi, but not for wired connections (Ethernet).
3. Method 3: Changing the Wi-Fi password is a radical solution
If you need to delete all foreign devices at onceThe easiest way is to change the Wi-Fi password. This will disconnect all users, making it impossible for them to reconnect without a new password. This method is suitable if:
- 🔄 You don't know which devices exactly need to be blocked.
- 🔒 Want to ensure maximum security (for example, after a password leak).
- 📵 You have few devices and they can be easily reconnected.
Instructions for changing your password:
- Log in to your router's control panel (see Method 1).
- Find the section
Wireless Settings(orWi-Fi settings). - In the field
Password(orNetwork key) enter a new password. Recommendations:- Use at least 12 characters.
- Combine the letters (
A-Z, a-z), numbers (0-9) and symbols (!, @, #). - Avoid obvious combinations (
12345678,qwerty, dates of birth).
How to create a strong password?
Use the phrase method: Take a memorable string (e.g. "MyCatLovesSleepingOnTheBattery") and add numbers/symbols: "MyCatLovesSleepingOnTheBattery@2026!"
Or use a password generator (for example, in the Chrome browser or a password manager Bitwarden).
Don't store your password in plain text - use password managers like 1Password or KeePass.
After changing the password, all devices except those you reconnect will lose access to the network. This is also a good idea. once every 3–6 months to increase security, especially if you often have guests or use Wi-Fi in public places (such as cafes or coworking spaces).
⚠️ Attention: If you have forgotten the new password and cannot connect, you will have to reset the router to factory settings (button Reset). After this, the password will become the default (indicated on the sticker), but all personal settings (including MAC filtering) will be reset.
4. Method 4: Using parental controls to temporarily block
If you don't need to delete the device permanently, but only restrict access at a certain time (for example, for children at night or for guests during the day), use the function parental controlIt is available on most modern routers and allows you to:
- 🕒 Block internet access according to a schedule (for example, from 11:00 PM to 7:00 AM).
- 📵 Block specific websites or types of content (social networks, games).
- 📊 Track time spent online.
Setting up parental controls using an example TP-Link:
- In the control panel, go to
Additional Settings → Parental Controls. - Click Add and select the device from the list (or enter its MAC address manually).
- Set a blocking schedule (for example, from 10:00 PM to 8:00 AM on weekdays).
- Apply the settings and reboot the router.
On Keenetic And ASUS The function is called "Time Control" or "Time Scheduling". Some routers (for example, Netgear Nighthawk) allow you to create separate networks for guests with limited access - this is convenient if you do not want to block the main network.
⚠️ Attention: Parental controls only work for devices connected via Wi-Fi. If the target device is using a wired connection (Ethernet), blocking won't work. In this case, you'll need to configure Firewall or physically disconnect the cable.
5. Method 5: Blocking via a mobile app (for routers with support)
Many modern routers (for example, ASUS RT-AX88U, TP-Link Deco, Keenetic) have official mobile apps that simplify network management. Through them, you can:
- 📱 See a list of connected devices in real time.
- 🚫 Block unwanted gadgets with one tap.
- 🔄 Change your Wi-Fi password without logging into the web interface.
- 📊 View traffic statistics by device.
Application examples:
- 🔹 TP-Link Tether — for TP-Link routers and mesh systems.
- 🔹 ASUS Router — for ASUS devices.
- 🔹 Keenetic — for Keenetic routers.
- 🔹 Netgear Nighthawk — for Netgear routers.
How to lock a device through an app (using an example) TP-Link Tether):
- Download and install the application from App Store or Google Play.
- Register or log in using your router credentials.
- Go to the "Devices" or "Clients" section.
- Find the device you want to block and tap it.
- Select the "Block" or "Disable" option.
Benefits of app control:
- ✅ No need to remember the router's IP address.
- ✅ Notifications about new connections.
- ✅ Ability to manage the network remotely (if cloud access is enabled).
However, this method also has its disadvantages:
- ❌ Not all routers support mobile apps (especially older models).
- ❌ Functionality may be limited compared to the web interface.
6. Method 6: Advanced Methods (for experienced users)
If standard methods fail (for example, the device continues to connect despite MAC filtering), advanced methods can be used. These require technical knowledge and caution, as incorrect settings can disrupt network operation.
6.1. Blocking via Firewall (using MikroTik as an example)
On routers with support Firewall (For example, MikroTik, Ubiquiti) you can create a rule that will discard packets from a specific device. Example for MikroTik:
/ip firewall filter add chain=forward src-mac-address=AA:BB:CC:DD:EE:FF action=drop comment="Block Device" disabled=no
Where AA:BB:CC:DD:EE:FF — MAC address of the target device.
6.2. Changing the Wi-Fi channel
Some devices (especially older ones) do not support modern Wi-Fi standards (for example, 802.11ac or Wi-Fi 6). If you switch the router to a less common channel (for example, 13th (In the 2.4 GHz band), such devices will not be able to connect. However, this may reduce the speed for other clients.
6.3. Creating a separate network for guests
Many routers allow you to create guest network with a separate password and restrictions. For example, on ASUS:
- Go to
Guest Network. - Enable guest network and set a password.
- Limit speed or access time.
- Connect unwanted devices to the guest network and make the main network hidden (
Hide SSID).
⚠️ Attention: Before useFirewallor change channels, make a backup copy of the router settings (System Tools → Backup & Restore). Incorrect rules can block access to all devices, including yours.
7. How to check that the device is actually turned off
After blocking, it's important to ensure the target device no longer connects to the network. Here's how:
- Checking via the router panel:
- Go to the section
DHCP ClientsorConnected Devices. - Refresh the page (
F5) and make sure that the blocked device has disappeared from the list.
- Go to the section
- Using mobile applications:
- Apps like Fing or NetScan scan the network and show all connected devices.
- If the device is still visible, try rebooting the router.
- Find out the IP address of the blocked device (if it is static).
- Open command prompt and run:
ping 192.168.1.100(replace
192.168.1.100to the current IP). - If the answer is "
The specified node is unavailable" — the blocking worked.
If the device continues to connect:
- 🔄 Check if your router settings have been reset (for example, after a power outage).
- 🔧 Make sure the MAC address is entered correctly (sometimes symbols
OAnd0orIAnd1(they are confused). - 📡 Try a combination of methods (e.g. MAC filtering + password change).
8. Common mistakes and how to avoid them
When blocking devices, users often encounter typical problems. Here are the most common errors and their solutions:
| Problem | Cause | Solution |
|---|---|---|
| The device locks up but reconnects after rebooting the router. | Settings are not saved to non-volatile memory | Make sure you clicked "Save" or "Apply" and didn't just close the page. |
| I can't access my router's control panel. | Incorrect IP address or login/password | Reset the router using the button Reset or check the information on the sticker |
| MAC filtering is not working | The filter is set to "Allow" instead of "Deny" | Check the filtering mode in the settings (Deny instead of Allow) |
| I blocked my device and can't connect. | Error entering MAC address | Connect via cable (Ethernet) and correct the settings |
| The guest network is not available in the list. | The function is disabled or hidden | Enable the guest network in the settings and uncheck the "Hide SSID" box. |
A few more tips:
- 🔄 If after blocking the internet connection is lost on all devices, check if you accidentally blocked it DHCP server (it distributes IP addresses).
- 📡 On dual-band routers (2.4 GHz + 5 GHz), blocking can only affect one band. Check both.
- 🔒 If you use VPN On the router, some blocking methods (such as parental controls) may not work.
⚠️ Attention: On some routers (especially with firmware from the provider, for example, Rostelecom or Beeline) Access to advanced settings may be restricted. In this case, please contact your provider's support or update your firmware to the official version from the manufacturer.
FAQ: Answers to Frequently Asked Questions
❓ Is it possible to block a device by IP address?
Technically yes, but it's unreliable. IP addresses on a local network are assigned dynamically (DHCP), and after rebooting the router or device they may change. It is better to use MAC address or change your password.
❓ What should I do if an unknown device connects over and over again?
Most likely, someone on your network (like a neighbor) is using password cracking or MAC address spoofing software. In this case:
- Change your Wi-Fi password to a more complex one (12+ characters, case-sensitive).
- Turn on
WPA3instead ofWPA2(if the router supports it). - Turn it off
WPS(this is a vulnerable protocol). - Contact your provider - the leak may be on their end.
How do I block a device on a router from a provider (for example, Rostelecom)?
Routers from ISPs often have limited functionality. Try this:
- 🔧 Login to the control panel at
192.168.0.1or192.168.1.1(login/password is usually on a sticker). - 📞 Call your provider's support team and ask them to enable MAC filtering.
- 🔄 Buy your own router and connect it in mode
Bridge(bridge).
If all else fails, change your Wi-Fi password—it works 100% of the time.
❓ Is it possible to find out which device is connected by its MAC address?
Yes, the first 6 characters of the MAC address (eg. B8:27:EB) indicate the manufacturer. Check them using services like:
- MAC Vendors (
https://macvendors.com) - Wireshark OUI Lookup (
https://www.wireshark.org/tools/oui-lookup.html)
For example, B8:27:EB - This Raspberry Pi, A 78:31:C1 — Apple.
❓ Why does the device still connect after being blocked?
Possible reasons:
- 🔄 The router did not save the settings (check that you clicked "Save" or "Apply").
- 🔧 The device is connected via cable (Ethernet), not Wi-Fi.
- 📡 In use
Mesh network(For example, TP-Link Deco), and the device connects to another node. - 🔒 The device's MAC address has changed (some smartphones and laptops allow this).
Solution: Combine methods (e.g. MAC filtering + password change + parental controls).